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AMFNmVfEN' ^g CLAIMS; 

This listing of claims will replace all prior versions, and listings, of claims in the 

application: 

, (Orig,„al)Aloadbalancmgdcvi«f»bda,Km|««loadaaossapluralttyotproxydevices 

^,ed ,0 perfom, malware scanning of files wiU.in a fie su^e device of a compu^r 
Z*Jcompu.„„e.wo.l.havi„gap.u,aUtyofcUe„.device.a..ansed.oiss«access«^^^ 

IgadedicaJme access p».ocoUo*ef,,es.o.ge device in ord^^accc.smess.0^ 
ILage device, me load balancing device betog a^anged so as .0 in,ercep. access «.es. 

issued to (he file storage device, and comprising: 

aclien.imerf«.for,eceivi„g an access requestissuedtoti. file sto^gedevceustngthe 

dedicated file access protocol; . 

.oadbal^cinglogicforapplyingap^detenninedloadbalancingroutinetodetermmeto 

which proxy device to direct that access request; and H,.^i„edbv 
aproxydeviceintertaceforsendingdreaccessrequesttotheproxydevrcedetennmedby 

theloadbalancinglogiceachproxydevicebeingcoupledtothefilestoragedevice. 

2 (Original)Aloadba,ancingdeviceasclain,edtoCiaiu,l.whereinthededicat^fileacc^^ 
p,„Jis.^esLerMessageBl«.(SMB,prc^l,andtheac<.srequestsareSMBcalls,ssue^ 

to the file storage device. 

3 (Original) A load balancing device as claimed in Claim 1, wherein the dedicated file access 
p„JislNetwor.FileSystem(NFS)p.otocol,andtheaccessrequestsareNFSca,ls,s.edto 

the file storage device. 

4 (Original)Aloadbala„cingdeviceasclaim=dinClain,l.whereinsaidloadbalancing 
„„tineisa,ranged,upo„receiptofanaccessre,^es.topolleachof,hep,tua,ityotproxydev.<^, 
Ltocause,h!accessreques.tobese.tod,efirs.proxydeviceinsaidplural.tythat.epl,esw.th 

an indication that it U available to handle the access request 
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5 (Original)Aloadba,a„cmgdevice«claimedinClaiml,wheremsa,dloadbala„ang 
„u«„ei.a™nge<.«,applva-.ou„drobi„"sys.™o(anocaUo„o,access,c,ues«»proxydev^ 
tosaid plurality so as^evcnlydismbu^^e access ,e,ues.amongst*ep.ural.y of proxyd^^^^ 

6 (Original) A load balancing device as claimed in Claim 1, whe«ta me proxy device 
intertaceisarrangedtoreceivearcady signal ftomeachp„>xy device in saidpluralityindicatrng 

whethera.atp,o.ydeviceisreadytoreceivea.aocessre<,uest.me.oadb.ancing™.^ 
a,^gedt„reteru>saidrcadysi^svvhende,e™«>g.o>^ohp«,xydcvtcetod«ctapamc^^ 

access request 

7 (Original) A load balancing device as claimed in Claim l.whetein each device in the 

computer networic i, assi^ » i<i»tifier, and flte load balancing device is assigned *e same 
iden,i£ierasisassig„edt„fl.efUes.oragedevice,theclie„tinte,fa«betagconnec^^^^^^^^^^^ 
c„mm— inftas™ctureof,he»mpu.rnetwor..cenablec«mmumcat.onbetwecn^^ 
balancingdevice and said clie„.devices,whilsttheplurali.y of proxy devrcesareconnectable tote 

!:;:ice..erfaceand*efilestoragedeviceis«nn=ctabletoeachp«.xyd 
LsLagedeviceiso„lyaccessiblebysaidclien.dcvicesviasaidl„adbalancingdev,ceand„neof 

said proxy devices. 

8 (Original)A.oadbalancingdeviceasclaimedinaaim7,whereinapluralityoffae^g^ 
aevicesma,beconnec.ed.oeacho,said^xydevices,eachfdestoragedevicehavmga,tf^^^ 
identifier. a™itheloadbalanc,ngdevicebeingassig„edmultipleide„.if.e,.co,respondmg.o me 

nfier^of*efdestoragedevic«co„nec.ed.o,hepluraHtyofproxydevices,m^ 
lgconf,guredtoreceiveanyaccessre<,uestsissued.ooneofsaidfilestoragedevKescc™e^ 

to the plurality of proxy devices. 

, (Original)AloadbalancingdeviceasdaimedinClaiml,»-hereineachdevicein.he 
computer netv^otkis assigned an identifier,theloadba,ancingdevice being assi^aun^^^^ 
idenLdi,rer«,t.o.heiden.ifierofthefilestoragedev,ce,.heclientdevices,.heloadl»^Mcmg 
deviceandthefilestoragedevicebeingconnectabletoacommunicaUon infrastructure of the 
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„^«,,««vork>ecUe„.devicesbel„gconf,^suchto, access ^e^issu^lbyftecU^^ 
devices are^ted^meloadbalancingdevice. and .henie storage dcviccb«ngcori-,gured«> 
^eachproccssedaccessre,ues,«>*ep»xy device ftom which maucccss request was 

received. 

10 (OrigirtaljAbalancedproxysys^mforperformingmalwa^scanongoffUessroredwito 
affle storage device ofacomp«ternetwork,4.e computer r^rw-Ahavingaplurality of Chen, 
devicesarra„ged.oissueaccessre<pes,susi.gadedica,edffleaccessprotoco.to*ef,les.<^^ 

aevice i„ order to access flies stored on me flle storage device, the balan«d proxy system bemg 
™edsoastointercep.accessrequestsissued.othefllesto,agedevice.a»dcompns,ng: 

a plurality of proxy devices arr^»i to perform said nralware scaling of flies stored wtthm 

the file storage device; and , . ^ ^ a «i„r^iitv 

a load balancing device as claimed in Claim 1 for determining to winch of sa,d plurahty 

of proxy devices to direct any particular access request; 

each proxy device comprising: 

(a) a f»st interface for receiving from the load balancing device an access 
^ issued by one of said client devices to said file storage device using the 
dedicated file access protocol; 

(b) a second interface for communicating with the file storage device to cause 
the file storage device to process the access request; 

(c) processing logic for causing selected malware scamiing algorithms to be 
executed to detennine whether the file identified by the access request is to be 

considered as malware. 

n (Original)AbalancedproxysystemasclaimedinClaimlO,whereintheprocessi^^^ 
responsivetoconfigurationdatatodeterminewhichmalwarescanningalgori^^^ 
selected foraparticularfU^eachproxydevicefimhercomprisingascanning^^^^ 

malware scanning algorithms selected by the processing logic. 
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12 (Original) A balanced proxy system as claimed in Claim 10, »h«eta each pmxy device 
ftrt,erc™nprisesafllecachefors.oringHlespreviouslyacccssedby.heclientdevices.upon 

^iptofanaccess request idenUfyingafdetob* read tamthcfdesloragedevice. .he p^cessmg 
logic being arranged to determine »h=d>er the file identified by the access request is stored m the 
file cache and if so to return the file to the client device via the load balancing device wtthou. 
communicating with the file storage device via the second interface. 

13 (Original) A balanced proxy system as clate.ed.in Qaim 12, wherein the file cache is 
a^nged only to store files which have been determined no, to be considered as malware. 

14 (Origmal) A balanced proxy system as claimed in Claim 10, wherein, upon receipt of an 
accessreq»es.,theprocessmglogic is arrang^itodetermineftomthe access r^iuestpredeter^ 

.tributes, and to send ftose predetermined attributes to the file storage device to enable me file 
storagedevicetoperformavalidationcheclcthepnKessteglogiconlyaUowing the access request 

,0 proceed it the ffle storage device confirms that the client device is aUowed.0 access Ure file 
identified by the file access request. 

15. (Origteal)Abalanccdproxysystemasclata,^i«Clate.l4,fi«thercomprisingauseroache 
for storing the piedetermined attributes. 

16 (Origmal) A method of operating a load balancing device to balance the load across a 
pluralityofproxydevicesarrangedtoperformmalwarescanntogof files stored withinafile storage 

device ofacomputer network. thecomputernetwtAhavingapluraUty of clientdevices arranged to 
issue access requests ustagadedicated file access p«,.ocol to the file storage device in order to 

access files stored on the file storage device, the load balancing device bemg arranged so as to 
tatercept access requests issued to the file storage device, andtemethodcompristegthe steps of: 

(a) receivinganaccessrequestissuedtodrefilestoragedeviceusingthededicatedfileaccess 

protocol; . 

(b) applymg a predetermteed lo»i balancing routine to determine to which proxy device to 

direct that access request; and 
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(c) sendingtheaccessrequesltotheproxydevicedetenrunedatsaidstep(b),ea^ 
being coupled to the file storage device. 

17 (Original) A mahod as claimed in Claim 16, wherein dedicated fie access protocol is 
the Server Message Block (SMB) protocol, and the access requests are SMB calls issued to the file 
storage device. 



18 



(Original)Amethod as daimed in Clairn 16, wherein the dedicated ffle access prot«^^^ 
*e Network FileSystem(NFS)protocol, and the access requests are NFS calls issued to theme 

Storage device. 

19 (Original) A method as claimed in Claim 16, wherein said load balancing routine is 
arn»g«i,uponreceip.of an ac^ssrequest, to poUo^of the plurality of proxy devices, and ,0 

cause *e access request to be sen. to 4» firs, proxy device in said plurality that replies wrth an 
indication diat it U available to handle the access request. 

20 (Origind)Ame,hodasclaimedinClaiml6,whereinsaidloadbalancingro«tineisarra„g=d 
U,'applya"round robin-system of allocation of access requests to p^xy devices in said pluraltty so 

as to evenly distribute the access requests amongst the plurality of proxy devces. 

21 (Original) A method as claimed in Claim 16, wherm the load balancing device is arranged 
to receiveareadysipralftome^h proxy device in said plurality indicating whedrer that proxy 

device is ready to receive an access requea, the load balancingr««me being arrang«i to refer to 

said ready signals when determinmg to which proxy device to direaapartiarlar access request 

22 (Original) A method as claimed in Claim 16, whe^in each device in the compui^r network 
is assipred an identifier, and the load balancing device is assigned dre same identifier as is assi^ed 
to the file storage device, die mediod comprising the steps of; 
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client devices; 

com 
device; and 



connecting a client interface of the load balancing device to a conmtunicaUoo infrastnK««« 
of the computer network to enable conuntmication between the load balancing device a»i sard 

evices' 

connecting the plurality of proxy devices to a proxy device interface of the load balancing 

device; and , • 

connecting the file storage device to each proty device, such that the file storage device ,s 
only accessible by said client devices via said load balancing device and one of said proxy devrces. 

23 (Original) A medrod as claimed to Clata, 22, wherein a plurality of file storage devices may 
be corrected to each of s^d proxy devices, each file storage device havi„gadifferenti6entifler,and 

the load balancing device being assigned multiple identifiers corresponding to the identifiers of the 
file storage devices connected to .he plurality of proxy devices, the client taterfacebetag configured 

,0 receive any access requests issued ,0 one of said file storage devices comrected to me pluralrty of 



proxy devices. 



24 (Original) A method as claimed in Claim 16, wherein each device in the computer network 
is assigned an identifier, the load balancing device being assigned a unique identifier different 

identifier of the file storage device, the method comprising the steps of: 

comiecting the client devices, the load balancing device and the file storage device to a 

communication infiastructure of the computer network; 

configuring the client devices such that access requests issued by the client devices are 

routed to the load balancing device; and 

configuring the file storage device to return each processed access request to the proxy 

device from which that access request was received. 

25. (Original) A method as claimed in Claim 16. wherein each proxy device is arranged to 
perform the Steps of : 

(i) receiving from the load balancing device an access request issued by one of said client 
devices to said file storage device using the dedicated file access protocol; 
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(ii) conununicatingwiththefilestoragedevicetocausethefdest^^^^ 
access request; and 

(iii) causing selected malware scanning algorithms to be executed to determine whether the file 
identified by the access request is to be considered as malware. 

26 (Original) A method as claimed in Claim 25, wherein said step (iii) comprises the steps of: 
responsive to configuration data, determining which malware scanning algorithms should be 

selected for a particular file; and 

employing a scamimg engine to execute the malware scamiing algorithms selected by said 

determining step. 

27. (Original) A method as claimed in Claim 25. wherein each proxy device is anranged to 

perform the further steps of: 

storing within a file cache files previously accessed by the client devices; 

upon receipt of an access request identifying a file to be read firom the file storage device, 
determinmg whether the file identifiedbyO^e access request is stored in the filecacheandrfso to 

return the file to the client device via the load balancing device without communicating with the f^^^ 
Storage device. 

28. (Original) A method as claimed in Claim 27. wherem the file cache is arranged only to store 
files which have been determined not to be considered as malware. 



29. 



(Original) A method as claimed in Claim 25, wherein each proxy device is arranged to 

perform the further steps of: 

upon receipt of an access request, determining from the access request predetermined 

attributes; 

sending those predetermined attributes to the file storage device to enable the file storage 

device to perform a validation check; and 

only allowing the access request to proceed if the file storage device confirms that the client 
device is allowed to access the file identified by the file access request. 
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30. (Original) A method as claimed in Claim 29. further comprising the step of storing within a 
user cache the predetermined attributes. 

31 (Cuirently Amended) A compMer program p«d^nmhMi.d in . rom p„.er-readable 

balancingtelcadacrossapluraUty of proxydevK^s ranged ,op«fonnmd»arcsc»nmgofM^ 
stored widrinaffle storage device ofacornpu«ne,w„rk,U«cor„pu«rnen™*havu«aplurd^^^ 
ofclient devices arranged ,0 issue access request usingadedicaKdflle access protocol to d,e file 
storage device in order ,0 access files stored on the file storage device, the load balancing devtce 

being arranged so as to intercept access requests issued to dre file stoage device, and the computer 
MULi iim nrndr" -'^-^ ' .^mnuter-readable medium.comprising: 

(a) clientint«fac.codeo(«,able,o,ec«iveanaccessreq^tissued.othe81es.oragedev,ce 

using the dedicated file access protocol; 

(b) loadbalancingcodeoperabletoapplyapredeterminedloadbalancingroutinetodetermme 
to which proxy device to direct that access request; and 

(c) proxy device interface code operable to send dte access request to the proxy devrce 
determinedbythe load balancing logic, eachproxydevicebeingcoupledtothefilestoragedevice. 

32 (Cunently Anrended) A computer program ,«d« M-,nbndi.^ in a co..pu. e»eadable 
medium as claimed in Claim 31. vvherein the dedicated fde access protocol is Ute Server Message 
Block (SMB)protoc„l. and the access tequests are SMB calls issued to the file storage devrce. 

33 (Currently Amended) A compme, pn,gramf«du* nnhodiM in n computer-readable 
medium as claimed m Claim 31, wherein the dedicated fUe acms ptotocol is tt« NetwoHt Fde 
System (NFS) protocol, and dre access requests are NFS calls issued to the file storage devrce. 

34 (CurrenUy Amended) A computer program p«d«e,-emboc!^^ 
medium as claim«l in Claim 31, wherein said load balancing routine is arranged, upon recerpt of an 
;;:;:;«pest,topoll each of theplurality of proxy devices, and to causetheaccessr^^^^^ 
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sent to the first proxy 
handle the access request. 



device in said plurality that replies with an indication that it is avaUable to 



35 (Currentiy Amended) A computer program p,^d«e^embodie^^ 

n^ediumas claimed in Claim 31, wherein said load balancing routine is arranged to apply a "round 
robin" system of allocation of access requests to proxy devices in said plurality so as to evenly 
distribute the access requests amongst the plurality of proxy devices. 

36 (Currently Amended) A computer program p^>>mhodied in a com puter-readable 
n^edium as claimed in Claim31, wherein the loadbalancing device is arranged to recei^ 
signal from each proxy device in saidplurality indicating whether that proxy device is readyto 

receive an access request, the load balancing routine being arranged to refer to said ready signals 
when determining to which proxy device to direct a particular access request. 

37 (Currently Amended) A computer program p^edue^embgdM^^ 

^edmm as claimed in Claim 3 1 , wherein each devic in the computer network is assigned an 

identifier,andtheloadbdancingdeviceisassignedthesameidentifierasisassignedtoA^ 

storage device,aclientinterfaceofthe load balancmg device being comxectabletoacomm™^^^^ 
ir^tructure of the computer network to enable communicationbetween the loadbal^^^^ 
and said client devices, whilst the plurality of proxydevices are comiectabletoaproxydevice 

interface of the load balancing device and the file storage device is comiectable to each proxy 
device, such that the file storage device is only accessiblebysaid client devices via said load 

balancing device and one of said proxy devices. 

38 (CurrenUy Amended) A computer program p^due^ mhodiH in n computer readable 
niedium as claimed in Claim37,whereinaplurality of filestorage devices may be connected to 
each of saidproxy devices, each file storage device havingadifferentidentifier.and the load 
balancingdevicebeingassignedmultipleidentifierscorrespondingtotheidentifiersofthefile 
storage devices connected to the plurality of proxydevices, the client interface codebeing operable 
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to receive any access requests issued to one of said file storage devices cor^^^ 
proxy devices. 

39 (CmiCTtty Amended) A computer program p^ fmhodi^ in a computer-readab le 
medium as claimed in Claim 31. wherein each device in the computer network is assigned an 
identiner,theloadbalancingdevicebei„gassignedaum,ueidentiflerdifferen,tothe identifier of 

the file storage device, the client devices, the load balancing device and dre file storage device bemg 
connectabletoacommumcationinfrastmctnre of the computer network the client devices bemg 
corfigured such *at access request issued by Ute client devices are routed to the load balancmg 
device, and the file storage device being configured to remm each processed access request to the 
proxy device from which that access request was received. 

40 (Cunentty Amended) A computer program f rn rturl nnbndied in a rom pmer-readabl e 

malware scanning of files stored within a fie storage device of a compute network, dte 
compute network having a plurality of client devices arranged to issue access requests usmg a 
dedicated file access protocol to the file storage device in order to access files stored on fte file 
storage device, d-e balanced proxy system being arranged so as to intercept access requests 
issued to dte file storage device, d>e balanced proxy system comprising a plurality of proxy 
devices arranged to perform said malware scanning of files stored within the file storage dev.ce, 
andaloadbalancingdevice for determiningto which of said plurality of proxydevices to dtrect 

any particular access request, the compute program p r ndun, rmhndiM in a rom pnter-readabl. 

medium comprising: 

a first computer program p r ndnr , ^bodied in a c.mpu.er-r.ndable medium as clam«d m 
Claim 31 operable to configure the load balancing device to perform a meUtod of balancing the load 

acioss die plurality of proxy devices; and 

a second computer program predue^mbodied in n onn,puler-r.adahle mcdium .operable to 
configure each ptoxy device to perfom. said malware scamting, comprising: 

reception code operable to receive from the load balancing device an access request issued 
by one of said client devices to said file storage device using the dedicated ffle access protocol; 
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communication code operable to communicate with the file storage device to cause the file 
storage device to process the access request; and 

algorithm invoking code operable to cause selected malware scanning algorithms to be 
executed to determine whether the file identified by the access request is to be considered as 
malware. 

41 . (Currently Amended) A computer program pFodBe^- embodied in a computer-readable 
medium as claimed in Claim 40, wherein said algorithm invoking code is operable to determine, 
responsive to configuration data, which malware scanning algorithms should be selected for a 
particular file, and the second computer program product further comprises scanning engine code 
responsive to said algorithm invoking code and operable to execute the malware scamiing 
algorithms selected by said algorithm invoking code. 

42. (Currently Amended) A computer program p^^mbodied in a com puter-readable 
medium as claimed in Claim 40, wherein said second computer program embodied in a computer- 
rpndnhle medium p fedeet-further comprises: 

caching code operable to store within a file cache files previously accessed by the client 

devices; 

the reception code being operable, upon receipt of an access request identifying a file to be 
read from the file storage device, to determine whether the file identified by the access request is 
stored in the file cache and if so to return the file to the client device via the load balancing device 
without communicating with the file storage device. 

43. (CurrenUy Amended) A computer program predtte^embMMJn^^ 
medium as claimed in Claim 42, wherein the file cache is arranged only to store files which have 
been determined not to be considered as malware. 

44. (Currently Amended) A computer program pfedHe^ pmbodied in a computer-readable 
medium as claimed in Claim 40, wherein said reception code is operable, upon receipt of an access 
request, to determine from the access request predetermined attributes, the communication code 
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being operable to send those predetermined attributes to the file storage device to enable the file 
storage device to performavalidation check, the access request onlybeing allowed to proceedtfthe 

file storage device confirms that the client device is allowed to access the file identified by the file 

access request. 

45. (Currently Amended) A computer program p^embodied in a com puter-readable 
n^ediumas claimed in Claim 44. fiarther comprising a user cache for storing the predetermined 
attributes. 
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